@docupace/pipeline 1.0.56 → 1.0.57

package/src/next/publish.js

@@ -1,71 +1,71 @@
-import { $ } from './logger.js';
-
-const {
-  JF_REGISTRY_URL,
-  JF_REGISTRY_REPO_NAME,
-  JF_REGISTRY_PASSWORD_DEV,
-  JF_REGISTRY_USER_DEV,
-  BITBUCKET_REPO_SLUG,
-  BITBUCKET_BUILD_NUMBER,
-  APP_NAME,
-} = process.env;
-
-const JF_REGISTRY_FULL_URL = `${JF_REGISTRY_URL}/${JF_REGISTRY_REPO_NAME}`;
-
-async function loginRegistry() {
-  await $`echo ${JF_REGISTRY_PASSWORD_DEV} | docker login --username ${JF_REGISTRY_USER_DEV} --password-stdin ${JF_REGISTRY_URL}`;
-}
-
-async function logoutRegistry() {
-  await $`docker logout ${JF_REGISTRY_URL}`;
-}
-
-export async function publish(gitSha) {
-  process.env.DOCKER_HOST = '';
-
-  console.log(JSON.stringify(process.env));
-
-  const IMAGE_PREFIX = APP_NAME ?? BITBUCKET_REPO_SLUG;
-  const BUILD_IMAGE_NAME = `${IMAGE_PREFIX}:build-${BITBUCKET_BUILD_NUMBER}`;
-  const IMAGE_NAME = `${IMAGE_PREFIX}:sha-${gitSha}`;
-
-  console.log(`Publishing Docker image ${IMAGE_NAME}...`);
-
-  await loginRegistry();
-
-  let manifestExists = false;
-  try {
-    $.verbose = false; // Silence output temporarily
-    await $`docker manifest inspect ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
-    manifestExists = true;
-  } catch {
-    manifestExists = false;
-  } finally {
-    $.verbose = true; // Restore normal output
-  }
-
-  if (manifestExists) {
-    console.log(
-      `Tag sha-${gitSha} already exists in the remote repository. Skipping push.`,
-    );
-  } else {
-    await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
-    await $`docker push ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
-  }
-
-  await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}`;
-  await $`docker push ${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}`;
-
-  const gitTags = (await $`git tag --points-at HEAD`).stdout
-    .trim()
-    .split('\n')
-    .filter(Boolean);
-  for (const gitTag of gitTags) {
-    const version = gitTag.includes('@') ? 'v' + gitTag.split('@')[1] : gitTag;
-    const tagName = `${IMAGE_PREFIX}:${version}`;
-    await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${tagName}`;
-    await $`docker push ${JF_REGISTRY_FULL_URL}/${tagName}`;
-  }
-
-  await logoutRegistry();
-}
+import { $ } from './logger.js';
+
+const {
+  JF_REGISTRY_URL,
+  JF_REGISTRY_REPO_NAME,
+  JF_REGISTRY_PASSWORD_DEV,
+  JF_REGISTRY_USER_DEV,
+  BITBUCKET_REPO_SLUG,
+  BITBUCKET_BUILD_NUMBER,
+  APP_NAME,
+} = process.env;
+
+const JF_REGISTRY_FULL_URL = `${JF_REGISTRY_URL}/${JF_REGISTRY_REPO_NAME}`;
+
+async function loginRegistry() {
+  await $`echo ${JF_REGISTRY_PASSWORD_DEV} | docker login --username ${JF_REGISTRY_USER_DEV} --password-stdin ${JF_REGISTRY_URL}`;
+}
+
+async function logoutRegistry() {
+  await $`docker logout ${JF_REGISTRY_URL}`;
+}
+
+export async function publish(gitSha) {
+  process.env.DOCKER_HOST = '';
+
+  console.log(JSON.stringify(process.env));
+
+  const IMAGE_PREFIX = APP_NAME ?? BITBUCKET_REPO_SLUG;
+  const BUILD_IMAGE_NAME = `${IMAGE_PREFIX}:build-${BITBUCKET_BUILD_NUMBER}`;
+  const IMAGE_NAME = `${IMAGE_PREFIX}:sha-${gitSha}`;
+
+  console.log(`Publishing Docker image ${IMAGE_NAME}...`);
+
+  await loginRegistry();
+
+  let manifestExists = false;
+  try {
+    $.verbose = false; // Silence output temporarily
+    await $`docker manifest inspect ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
+    manifestExists = true;
+  } catch {
+    manifestExists = false;
+  } finally {
+    $.verbose = true; // Restore normal output
+  }
+
+  if (manifestExists) {
+    console.log(
+      `Tag sha-${gitSha} already exists in the remote repository. Skipping push.`,
+    );
+  } else {
+    await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
+    await $`docker push ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
+  }
+
+  await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}`;
+  await $`docker push ${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}`;
+
+  const gitTags = (await $`git tag --points-at HEAD`).stdout
+    .trim()
+    .split('\n')
+    .filter(Boolean);
+  for (const gitTag of gitTags) {
+    const version = gitTag.includes('@') ? 'v' + gitTag.split('@')[1] : gitTag;
+    const tagName = `${IMAGE_PREFIX}:${version}`;
+    await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${tagName}`;
+    await $`docker push ${JF_REGISTRY_FULL_URL}/${tagName}`;
+  }
+
+  await logoutRegistry();
+}

package/src/next/pull.js

@@ -1,7 +1,7 @@
-import { $ } from 'zx';
-
-export async function pull(imageName) {
-  const JF_REGISTRY_FULL_URL = `${process.env.JF_REGISTRY_URL}/${process.env.JF_REGISTRY_REPO_NAME}`;
-  console.log(`Pulling Docker image: ${JF_REGISTRY_FULL_URL}/${imageName}`);
-  await $`docker pull ${JF_REGISTRY_FULL_URL}/${imageName}`;
-}
+import { $ } from 'zx';
+
+export async function pull(imageName) {
+  const JF_REGISTRY_FULL_URL = `${process.env.JF_REGISTRY_URL}/${process.env.JF_REGISTRY_REPO_NAME}`;
+  console.log(`Pulling Docker image: ${JF_REGISTRY_FULL_URL}/${imageName}`);
+  await $`docker pull ${JF_REGISTRY_FULL_URL}/${imageName}`;
+}

package/src/next/sonar.js

@@ -1,23 +1,23 @@
-import { $ } from 'zx';
-
-export async function sonar(GIT_SHA) {
-  const IMAGE_NAME = `${process.env.BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}`;
-  const SONAR_CONTAINER_NAME = `${process.env.BITBUCKET_REPO_SLUG}-${GIT_SHA}`;
-
-  console.log(`Running Sonar analysis on Docker image: ${IMAGE_NAME}`);
-
-  // Remove existing container
-  const existingContainer = (
-    await $`docker ps -a --filter "name=${SONAR_CONTAINER_NAME}" --format "{{.Names}}"`
-  ).stdout.trim();
-  if (existingContainer) {
-    await $`docker rm -f ${SONAR_CONTAINER_NAME}`;
-  }
-
-  await $`docker run --rm \
-    -e BRANCH=${process.env.BITBUCKET_BRANCH} \
-    -e PR_ID=${process.env.BITBUCKET_PR_ID} \
-    -e PR_DESTINATION_BRANCH=${process.env.BITBUCKET_PR_DESTINATION_BRANCH} \
-    -e SONAR_TOKEN=${process.env.SONAR_TOKEN} \
-    --name ${SONAR_CONTAINER_NAME} ${IMAGE_NAME} pnpm sonar`;
-}
+import { $ } from 'zx';
+
+export async function sonar(GIT_SHA) {
+  const IMAGE_NAME = `${process.env.BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}`;
+  const SONAR_CONTAINER_NAME = `${process.env.BITBUCKET_REPO_SLUG}-${GIT_SHA}`;
+
+  console.log(`Running Sonar analysis on Docker image: ${IMAGE_NAME}`);
+
+  // Remove existing container
+  const existingContainer = (
+    await $`docker ps -a --filter "name=${SONAR_CONTAINER_NAME}" --format "{{.Names}}"`
+  ).stdout.trim();
+  if (existingContainer) {
+    await $`docker rm -f ${SONAR_CONTAINER_NAME}`;
+  }
+
+  await $`docker run --rm \
+    -e BRANCH=${process.env.BITBUCKET_BRANCH} \
+    -e PR_ID=${process.env.BITBUCKET_PR_ID} \
+    -e PR_DESTINATION_BRANCH=${process.env.BITBUCKET_PR_DESTINATION_BRANCH} \
+    -e SONAR_TOKEN=${process.env.SONAR_TOKEN} \
+    --name ${SONAR_CONTAINER_NAME} ${IMAGE_NAME} pnpm sonar`;
+}

package/src/next/util.js

@@ -1,93 +1,93 @@
-import { existsSync } from 'fs';
-import path, { join } from 'path';
-import { $ } from 'zx';
-
-export function isMonoRepo() {
-  // Check for the presence of turbo.json which indicates a Turborepo monorepo
-  return existsSync(join(process.cwd(), 'turbo.json'));
-}
-
-/**
- * Gets the packages that have changed between two git references (branches or tags)
- * @param {string} fromRef - The starting git reference (branch or tag)
- * @param {string} toRef - The ending git reference (branch or tag)
- * @returns {Promise<Array<{name: string, path: string}>>} - Array of changed packages with name and path
- */
-export async function getChangedPackagesInternal(fromRef, toRef) {
-  try {
-    console.log(process.cwd());
-    // Run the turbo command to get changed packages between branches
-    const filterArg = `[${fromRef}...${toRef}]`;
-    const turboDryOutput =
-      await $`turbo run build --filter=${filterArg} --dry=json`;
-
-    const dryRunJson = turboDryOutput.stdout.trim();
-
-    const dryRun = JSON.parse(dryRunJson);
-
-    const packages = dryRun.tasks.map((task) => ({
-      name: task.package,
-      directory: task.directory,
-      path: path.resolve(process.cwd(), task.directory),
-    }));
-
-    return packages;
-  } catch (error) {
-    console.error('Error getting changed packages:', error);
-    return [];
-  }
-}
-
-export async function getAllPackages() {
-  try {
-    const turboDryOutput = await $`turbo run build --dry=json`;
-    const dryRunJson = turboDryOutput.stdout.trim();
-    const dryRun = JSON.parse(dryRunJson);
-
-    const packages = dryRun.tasks.map((task) => ({
-      name: task.package,
-      directory: task.directory,
-      path: path.resolve(process.cwd(), task.directory),
-    }));
-
-    return packages;
-  } catch (error) {
-    console.error('Error getting changed packages:', error);
-    return [];
-  }
-}
-
-export async function getAllAppPackages() {
-  const changedPackages = await getAllPackages();
-  const appPackages = changedPackages.filter((appPackage) =>
-    appPackage.directory.startsWith('apps'),
-  );
-  return appPackages;
-}
-
-export async function getChangedPackages() {
-  const branch = process.env.BITBUCKET_BRANCH;
-  const destBranch = process.env.BITBUCKET_PR_DESTINATION_BRANCH;
-
-  await $`git fetch origin ${destBranch}:${destBranch}`;
-  console.log(`Getting changed packages for [${destBranch}...${branch}]`);
-  const changedPackages = await getChangedPackagesInternal(destBranch, branch);
-  console.log('Changed Packages:\n', JSON.stringify(changedPackages, null, 2));
-  return changedPackages;
-}
-
-export async function getChangedAppPackages() {
-  const changedPackages = await getChangedPackages();
-  const appPackages = changedPackages.filter((appPackage) =>
-    appPackage.directory.startsWith('apps'),
-  );
-  return appPackages;
-}
-
-export async function setGitInfo() {
-  if (!process.env.IS_DEV) {
-    await $`git config --global user.email "gitops@docupace.com"`;
-    await $`git config --global user.name "Gitops"`;
-    await $`git remote set-url origin https://${process.env.THIS_REP_TOKEN}@bitbucket.org/${process.env.BITBUCKET_REPO_FULL_NAME}.git`;
-  }
-}
+import { existsSync } from 'fs';
+import path, { join } from 'path';
+import { $ } from 'zx';
+
+export function isMonoRepo() {
+  // Check for the presence of turbo.json which indicates a Turborepo monorepo
+  return existsSync(join(process.cwd(), 'turbo.json'));
+}
+
+/**
+ * Gets the packages that have changed between two git references (branches or tags)
+ * @param {string} fromRef - The starting git reference (branch or tag)
+ * @param {string} toRef - The ending git reference (branch or tag)
+ * @returns {Promise<Array<{name: string, path: string}>>} - Array of changed packages with name and path
+ */
+export async function getChangedPackagesInternal(fromRef, toRef) {
+  try {
+    console.log(process.cwd());
+    // Run the turbo command to get changed packages between branches
+    const filterArg = `[${fromRef}...${toRef}]`;
+    const turboDryOutput =
+      await $`turbo run build --filter=${filterArg} --dry=json`;
+
+    const dryRunJson = turboDryOutput.stdout.trim();
+
+    const dryRun = JSON.parse(dryRunJson);
+
+    const packages = dryRun.tasks.map((task) => ({
+      name: task.package,
+      directory: task.directory,
+      path: path.resolve(process.cwd(), task.directory),
+    }));
+
+    return packages;
+  } catch (error) {
+    console.error('Error getting changed packages:', error);
+    return [];
+  }
+}
+
+export async function getAllPackages() {
+  try {
+    const turboDryOutput = await $`turbo run build --dry=json`;
+    const dryRunJson = turboDryOutput.stdout.trim();
+    const dryRun = JSON.parse(dryRunJson);
+
+    const packages = dryRun.tasks.map((task) => ({
+      name: task.package,
+      directory: task.directory,
+      path: path.resolve(process.cwd(), task.directory),
+    }));
+
+    return packages;
+  } catch (error) {
+    console.error('Error getting changed packages:', error);
+    return [];
+  }
+}
+
+export async function getAllAppPackages() {
+  const changedPackages = await getAllPackages();
+  const appPackages = changedPackages.filter((appPackage) =>
+    appPackage.directory.startsWith('apps'),
+  );
+  return appPackages;
+}
+
+export async function getChangedPackages() {
+  const branch = process.env.BITBUCKET_BRANCH;
+  const destBranch = process.env.BITBUCKET_PR_DESTINATION_BRANCH;
+
+  await $`git fetch origin ${destBranch}:${destBranch}`;
+  console.log(`Getting changed packages for [${destBranch}...${branch}]`);
+  const changedPackages = await getChangedPackagesInternal(destBranch, branch);
+  console.log('Changed Packages:\n', JSON.stringify(changedPackages, null, 2));
+  return changedPackages;
+}
+
+export async function getChangedAppPackages() {
+  const changedPackages = await getChangedPackages();
+  const appPackages = changedPackages.filter((appPackage) =>
+    appPackage.directory.startsWith('apps'),
+  );
+  return appPackages;
+}
+
+export async function setGitInfo() {
+  if (!process.env.IS_DEV) {
+    await $`git config --global user.email "gitops@docupace.com"`;
+    await $`git config --global user.name "Gitops"`;
+    await $`git remote set-url origin https://${process.env.THIS_REP_TOKEN}@bitbucket.org/${process.env.BITBUCKET_REPO_FULL_NAME}.git`;
+  }
+}

package/src/next/vault.js

@@ -1,45 +1,45 @@
-import axios from 'axios';
-
-export async function vaultAddSiteData(SITE, SITE_CONFIG_REMOTE_PATH) {
-  const AUTH0_CLIENT_ID = process.env.AUTH0_CLIENT_ID;
-  const AUTH0_CLIENT_SECRET = process.env.AUTH0_CLIENT_SECRET;
-  const VAULT_ADDR = process.env.VAULT_ADDR; // Vault host URL from environment variables
-  const VAULT_TOKEN = process.env.VAULT_TOKEN; // Vault token from environment variables
-
-  if (!VAULT_ADDR || !VAULT_TOKEN) {
-    throw new Error('Missing VAULT_ADDR or VAULT_TOKEN environment variable.');
-  }
-
-  const vaultApiUrl = `${VAULT_ADDR}/v1/secret/data/${SITE}/common/config`;
-
-  try {
-    if (process.env.VAULT_SKIP_VERIFY === 'true') {
-      process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
-    }
-
-    const response = await axios.post(
-      vaultApiUrl,
-      {
-        data: {
-          AUTH0_CLIENT_ID: AUTH0_CLIENT_ID,
-          AUTH0_CLIENT_SECRET: AUTH0_CLIENT_SECRET,
-          SITE_CONFIG_REMOTE_PATH: SITE_CONFIG_REMOTE_PATH,
-        },
-      },
-      {
-        headers: {
-          'X-Vault-Token': VAULT_TOKEN,
-          'Content-Type': 'application/json',
-        },
-      },
-    );
-
-    console.log('Data added to Vault successfully:', response.data);
-  } catch (error) {
-    console.error(
-      'Error adding data to Vault:',
-      error.response?.data || error.message,
-    );
-    throw error;
-  }
-}
+import axios from 'axios';
+
+export async function vaultAddSiteData(SITE, SITE_CONFIG_REMOTE_PATH) {
+  const AUTH0_CLIENT_ID = process.env.AUTH0_CLIENT_ID;
+  const AUTH0_CLIENT_SECRET = process.env.AUTH0_CLIENT_SECRET;
+  const VAULT_ADDR = process.env.VAULT_ADDR; // Vault host URL from environment variables
+  const VAULT_TOKEN = process.env.VAULT_TOKEN; // Vault token from environment variables
+
+  if (!VAULT_ADDR || !VAULT_TOKEN) {
+    throw new Error('Missing VAULT_ADDR or VAULT_TOKEN environment variable.');
+  }
+
+  const vaultApiUrl = `${VAULT_ADDR}/v1/secret/data/${SITE}/common/config`;
+
+  try {
+    if (process.env.VAULT_SKIP_VERIFY === 'true') {
+      process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+    }
+
+    const response = await axios.post(
+      vaultApiUrl,
+      {
+        data: {
+          AUTH0_CLIENT_ID: AUTH0_CLIENT_ID,
+          AUTH0_CLIENT_SECRET: AUTH0_CLIENT_SECRET,
+          SITE_CONFIG_REMOTE_PATH: SITE_CONFIG_REMOTE_PATH,
+        },
+      },
+      {
+        headers: {
+          'X-Vault-Token': VAULT_TOKEN,
+          'Content-Type': 'application/json',
+        },
+      },
+    );
+
+    console.log('Data added to Vault successfully:', response.data);
+  } catch (error) {
+    console.error(
+      'Error adding data to Vault:',
+      error.response?.data || error.message,
+    );
+    throw error;
+  }
+}

package/terraform/apply.sh

@@ -1,37 +1,37 @@
-#!/usr/bin/env bash
-set -e
-
-PROJECT=$1
-export ROLE_NAME="${2:-atlassian-bitbucket-pipelines-runner-eks-role}"
-
-if [[ -z "$PROJECT" ]]; then
-  echo "Error: Project name is required."
-  echo "Usage: $0 <project-name>"
-  exit 1
-fi
-
-if [ "$CURRENT_ENVIRONMENT" == "prd" ]; then
-  export EKS_CLUSTER_NAME="connect-next-prd-eks-cluster"
-  CURRENT_ENVIRONMENT="prod"
-elif [ "$CURRENT_ENVIRONMENT" == "stg" ]; then
-  export EKS_CLUSTER_NAME="connect-next-stg-eks-cluster"
-  CURRENT_ENVIRONMENT="stage"
-else
-  export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
-fi
-
-echo "Using EKS cluster: $EKS_CLUSTER_NAME"
-
-export SESSION_NAME="EKSAdminSession"
-export ROLE_ARN="arn:aws:iam::$(aws sts get-caller-identity | jq -r '.Account'):role/$ROLE_NAME"
-export ASSUME_ROLE_OUTPUT=$(aws sts assume-role --role-arn $ROLE_ARN --role-session-name $SESSION_NAME)
-export AWS_ACCESS_KEY_ID=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.AccessKeyId')
-export AWS_SECRET_ACCESS_KEY=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.SecretAccessKey')
-export AWS_SESSION_TOKEN=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.SessionToken')
-export TF_IN_AUTOMATION=1
-
-aws sts get-caller-identity
-
-cd "$BITBUCKET_CLONE_DIR/${PROJECT}"
-
-terraform apply -input=false .tfplan
+#!/usr/bin/env bash
+set -e
+
+PROJECT=$1
+export ROLE_NAME="${2:-atlassian-bitbucket-pipelines-runner-eks-role}"
+
+if [[ -z "$PROJECT" ]]; then
+  echo "Error: Project name is required."
+  echo "Usage: $0 <project-name>"
+  exit 1
+fi
+
+if [ "$CURRENT_ENVIRONMENT" == "prd" ]; then
+  export EKS_CLUSTER_NAME="connect-next-prd-eks-cluster"
+  CURRENT_ENVIRONMENT="prod"
+elif [ "$CURRENT_ENVIRONMENT" == "stg" ]; then
+  export EKS_CLUSTER_NAME="connect-next-stg-eks-cluster"
+  CURRENT_ENVIRONMENT="stage"
+else
+  export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
+fi
+
+echo "Using EKS cluster: $EKS_CLUSTER_NAME"
+
+export SESSION_NAME="EKSAdminSession"
+export ROLE_ARN="arn:aws:iam::$(aws sts get-caller-identity | jq -r '.Account'):role/$ROLE_NAME"
+export ASSUME_ROLE_OUTPUT=$(aws sts assume-role --role-arn $ROLE_ARN --role-session-name $SESSION_NAME)
+export AWS_ACCESS_KEY_ID=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.AccessKeyId')
+export AWS_SECRET_ACCESS_KEY=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.SecretAccessKey')
+export AWS_SESSION_TOKEN=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.SessionToken')
+export TF_IN_AUTOMATION=1
+
+aws sts get-caller-identity
+
+cd "$BITBUCKET_CLONE_DIR/${PROJECT}"
+
+terraform apply -input=false .tfplan